Industrial Cybersecurity & OT Risk worked example

EDR Agent Coverage at 99% target edr coverage threshold: a worked example

What does the result look like when target edr coverage threshold reaches 99%? The full calculation is worked below with real intermediate numbers. Use it when tracking monitoring coverage for HMIs, engineering workstations, servers, and supported industrial PCs.

The inputs for this scenario

  • Eligible OT endpoints with approved EDR agent installed: 210 endpoints (unchanged)
  • Total eligible OT endpoints in scope: 260 endpoints (unchanged)
  • Target EDR coverage threshold: 99 % (raised for this scenario; the documented default is 90)

Working through the calculation

  • Applying the documented formula (EDR agent coverage = eligible OT endpoints with approved EDR ÷ total eligible OT endpoints × 100) to the inputs above produces each figure below.
  • At this operating point the engine returns 80.77 % for edr agent coverage, the number this scenario is built around.
  • At this operating point the engine returns 18.23 points for edr coverage gap to target.
  • At this operating point the engine returns 210 count for eligible ot endpoints with approved edr.
  • At this operating point the engine returns 260 count for total eligible ot endpoints.

How this compares with the baseline

  • Against the tool's baseline example, where target edr coverage threshold sits at 90% and the headline result is 80.77 %, this scenario lands almost exactly on the baseline at 80.77 %.
  • A figure at this level is achievable when target edr coverage threshold is genuinely sustained, not just peaked for a shift. A flat percentage treats every endpoint as equal — it does not weight by asset criticality, so 80% coverage that excludes safety-critical or domain-controller endpoints is far worse than the number suggests.

Results at a glance

  • EDR agent coverage: 80.77 % (headline result)
  • EDR coverage gap to target: 18.23 points
  • Eligible OT endpoints with approved EDR: 210 count
  • Total eligible OT endpoints: 260 count

Run it with your numbers

  • Every input above is editable in the live EDR Agent Coverage calculator, which recalculates instantly and can be shared with the inputs intact.

Last reviewed 2026-05-12.